Here are the different events generated on a Windows Server 2016 ADFS server when a user successfully authenticates externally using an Exchange Active Sync client (such as a legacy mailing app).
All GUID are given as examples. Colors are to facilitate the correlation.